Command Injection Vulnerability in ZTE ZENIC ONE R58 Products
CVE-2024-22063
9CRITICAL
What is CVE-2024-22063?
The ZTE Corporation's ZENIC ONE R58 products exhibit a vulnerability that allows an authenticated attacker to perform command injection. By exploiting this flaw, an attacker can manipulate messages and inject harmful code into the system. This exploitation can lead to further attacks on other devices linked to the compromised system, creating a significant security risk. Immediate patching and vulnerability management are crucial for safeguarding the integrity of affected systems.
Affected Version(s)
ZENIC ONE R58 0
References
CVSS V3.1
Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
